CVE-2025-67089
A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges
Vendor
Product
CWE
Yayın Tarihi
2026-01-08 16:15:45
Güncelleme
2026-01-16 21:26:11
Source Identifier
cve@mitre.org
KEV Date Added
-